Reputation
316
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 10
Impact
~4k people reached

  • 0 posts edited
  • 0 helpful flags
  • 6 votes cast
Mar
25
comment EC2 save mdadm RAID setup in an AMI
You don't want the ephemeral devices be part of your mdadm-managed array. Using ZFS -- with ephemeral device(s) being caches -- should work much better for you. See serverfault.com/questions/663774/…
Feb
25
comment How to create a multi-domain self-signed certificate for Apache2?
At the time of this writing, the loftninjas.org link above is active (again).
Feb
3
comment How to best use Amazon's “ephemeral” SSD devices under Linux?
My question asks, whether there is any kind of "best practices" guide already. I list the options I could come up with to prevent people from wasting time relisting them...
Jan
30
comment ephemeral vs EBS partitions
Any idea on [how to distinguish the "ephemeral" volume(s) from the others from inside the VM][1]? Thanks! [1]: serverfault.com/questions/663183/…
Jan
28
comment How to reliably list ephemeral storage of an AWS instance?
Well, there is no /dev/xvdj either -- on this particular instance -- there is only /dev/xvdn.
Nov
25
comment Why would Puppet revoke a client's certificate?
Shane, using Apache. That openssl command -- run on one of the clients -- produced a lot of output. The revocations listed all claim Key Compromise as the reason and some of the dates go back to 2013...
Nov
25
comment Why would Puppet revoke a client's certificate?
Shane, no the "revoked" entries are the only ones for each host involved.
Nov
25
comment Why would Puppet revoke a client's certificate?
No, actually -- most of the hosts involved are new and their certs are only a few months old. Besides, they aren't listed as "expired" -- but rather as "revoked".
Nov
1
comment Why did git stop working after server disabled SSLv3?
The discussion just resumed after a couple of days of quiet -- it may be, the above patch will not be final after all. But it works :) Here is a link to one of online archives of HTTPD dev-mailing lists: mail-archive.com/dev%40httpd.apache.org/msg60833.html
Oct
30
comment Disabling SSLv3 but still supporting SSLv2Hello in Apache
Yes, that appears to be, what Apache developers are considering. See the [thread][1] I started there... [1]mail-archives.apache.org/mod_mbox/httpd-dev/201410.mbox/…
Oct
28
comment Disabling SSLv3 but still supporting SSLv2Hello in Apache
I can confirm, that Chris' patch helps -- curl (and libcurl-using programs such as git) can now talk to our server again, despite SSLv3 having been disabled -- without sslscan flagging any vulnerabilities. But the patch seems somewhat invasive and I'd like to ask Chris to submit it to Apache project for review ASAP. I'll file a ticket myself, if Chris does not :-) Thank you very much, Chris!
Oct
28
comment Why did git stop working after server disabled SSLv3?
That what I thought until I tested the same git against github -- which offers the exact same protocol-collection -- and found, that that worked...
Sep
6
comment How to monitor GlusterFS clients?
What will populate the SNMP information? I'm not asking for monitoring framework -- we have one already. I'm wondering, what to look for -- not how. Information from logs? Anything in particular I should look for? Thanks!
Jun
24
comment How to best backup AWS-hosted systems?
No, I do not need much replication of the backups. What I do need is what I listed in my question -- the four items. Thanks!
Jun
24
comment How to best backup AWS-hosted systems?
The backups shall end up stored on S3, correct. But which tool would create them -- "ec2 create-snapshot" or something else -- is my question...
Jun
24
comment How to best backup AWS-hosted systems?
Is your strategy capable of meeting the requirements I listed? We aren't using Windows here, but any plan for backing up MySQL databases may be of interest.
Jun
24
comment Simple S3 -> Glacier Backup
Yes, it would seem, the minimum time charged for Glacier storage is 3 months. Considering that nominally Glacier costs about ⅓ of S3, if you fully replace the backups more often than once a month, using Glacier makes no sense. It is more expensive and you have to wait hours to get your backups in case you ever need them.
Jun
24
comment How to best backup AWS-hosted systems?
Yes, EEAA, that is, what we want. Thank you.
May
30
comment How to place additional access-restrictions on a subdirectory in Apache?
For one, Vasili, the link you gave is for Apache-2.2, where auth mechanisms are quite different from 2.4. And then, of course, I've already read the 2.4 page on the subject -- to no avail. It is too basic and does not cover my case.
Mar
11
comment How to block ALL communications with an IP-address using iptables?
Using iptables -I PREROUTING -s $IP -j DROP blocks the $IP from neither the router itself nor from LAN. Same when I use "raw" instead of "PREROUTING".